Lucene search

[email protected]CVE-2022-3640

HistoryOct 21, 2022 - 3:15 p.m.

CVE-2022-3640

2022-10-2115:15:09

CWE-119

CWE-416

[email protected]

web.nvd.nist.gov

123

cve-2022-3640

vulnerability

linux kernel

bluetooth

use after free

patch

security issue

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.9%

JSON

A vulnerability, which was classified as critical, was found in Linux Kernel. Affected is the function l2cap_conn_del of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211944.

Affected configurations

NVD

Node

linuxlinux_kernelRange4.9.326–4.9.333

linuxlinux_kernelRange4.14.291–4.14.299

linuxlinux_kernelRange4.19.255–4.19.265

linuxlinux_kernelRange5.4.209–5.4.224

linuxlinux_kernelRange5.10.135–5.10.154

linuxlinux_kernelRange5.15.59–5.15.79

linuxlinux_kernelRange5.18.16–6.0.8

Node

fedoraprojectfedoraMatch35

fedoraprojectfedoraMatch36

fedoraprojectfedoraMatch37

Node

debiandebian_linuxMatch10.0

CPENameOperatorVersion
linux:linux_kernellinux linux kernellt4.9.333
linux:linux_kernellinux linux kernellt4.14.299
linux:linux_kernellinux linux kernellt4.19.265
linux:linux_kernellinux linux kernellt5.4.224
linux:linux_kernellinux linux kernellt5.10.154
linux:linux_kernellinux linux kernellt5.15.79
linux:linux_kernellinux linux kernellt6.0.8

CPE	Name	Operator	Version
linux:linux_kernel	linux linux kernel	lt	4.9.333
linux:linux_kernel	linux linux kernel	lt	4.14.299
linux:linux_kernel	linux linux kernel	lt	4.19.265
linux:linux_kernel	linux linux kernel	lt	5.4.224
linux:linux_kernel	linux linux kernel	lt	5.10.154
linux:linux_kernel	linux linux kernel	lt	5.15.79
linux:linux_kernel	linux linux kernel	lt	6.0.8

CNA Affected

[
  {
    "vendor": "Linux",
    "product": "Kernel",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]